Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AC48646E9EA711F09C892779DAE4EC9C.roa
File: AC48646E9EA711F09C892779DAE4EC9C.roa (raw, json)
Hash identifier: ucwXAUWtz6+yjzNzZqiYEg80Z2EfXrdwxVPlPaEJe2g=
Subject key identifier: 75:90:C3:22:1D:9E:85:F1:E6:27:4F:CF:35:3C:B1:4B:66:E2:9B:57
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017E49
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AC48646E9EA711F09C892779DAE4EC9C.roa
Signing time: Wed 01 Oct 2025 09:19:04 +0000
ROA not before: Wed 01 Oct 2025 09:18:59 +0000
ROA not after: Mon 10 Nov 2025 09:18:59 +0000
asID: 395886
IP address blocks: 156.233.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97865 (0x17e49)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 1 09:18:59 2025 GMT
Not After : Nov 10 09:18:59 2025 GMT
Subject: CN=68dcf208-6e67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:2f:7e:df:02:01:66:0c:6a:e8:10:d5:ec:d6:
23:fb:45:54:0a:ea:21:2e:db:99:29:0d:b7:bf:16:
97:ae:e5:e4:e4:05:d9:36:c5:f9:01:a9:ab:fd:78:
d2:c4:6e:83:44:07:46:0e:b7:03:61:5a:9b:a5:a9:
54:b9:5c:fe:3d:af:48:42:a4:0a:83:ef:5d:df:dd:
62:99:33:53:61:66:a1:36:26:44:03:f0:d4:a2:c3:
9c:ce:d3:53:2f:6d:5c:07:2f:36:14:b6:21:d7:bc:
e0:33:ba:b2:44:7b:5e:c7:fd:fb:ab:5e:2c:96:7e:
d3:bf:36:02:76:26:b1:cb:e5:0a:83:e6:05:47:c3:
31:2d:76:a9:b7:7b:3f:7c:5a:ee:3b:70:85:c6:55:
c6:6b:27:e8:07:85:b4:73:7d:1d:ee:a4:94:30:cd:
c4:dc:3b:ff:bf:1d:bc:d1:98:78:55:f2:40:ea:49:
3e:c8:53:5a:51:c4:21:68:32:da:4c:77:d9:33:81:
48:68:bc:e5:47:38:46:a7:9a:85:48:24:c9:9a:51:
12:61:cd:13:00:15:a9:fd:ff:3e:df:4f:6d:3b:08:
63:b5:3d:cd:37:7b:36:f2:4c:52:c9:be:d4:55:7b:
70:37:b3:66:10:11:ff:0c:b0:f3:49:21:2a:e9:48:
4a:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:90:C3:22:1D:9E:85:F1:E6:27:4F:CF:35:3C:B1:4B:66:E2:9B:57
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AC48646E9EA711F09C892779DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.224.0/20
Signature Algorithm: sha256WithRSAEncryption
5a:e6:3f:f5:c3:f7:bb:1d:e4:38:85:fd:f6:e5:50:8a:4b:18:
63:24:a0:b3:06:7f:ce:8a:1e:c9:96:5d:bf:50:d8:13:30:7f:
07:90:42:bd:cb:3d:76:ea:1a:e8:63:b0:07:02:e5:75:4e:65:
bb:97:b6:df:fe:8f:7d:3a:f5:c0:bd:26:14:b6:0a:85:33:22:
84:46:82:b2:ff:4e:9b:4e:37:95:58:72:3b:98:cb:3a:46:49:
35:5b:0c:54:7d:46:f0:7d:79:00:b4:50:99:e0:8b:16:29:ee:
7f:91:a3:8b:c3:60:53:67:30:37:03:2f:9b:2e:a2:15:40:ba:
1c:1e:40:2e:2c:18:48:73:56:4a:1f:6f:90:05:95:18:2e:8c:
50:2a:54:e1:aa:04:c6:07:9e:43:75:be:3d:05:16:e0:0f:5e:
b4:9e:7a:d5:92:70:f1:53:b8:67:3d:56:82:ee:74:4c:f2:12:
1a:7d:e0:30:6f:4d:83:ec:3b:27:6a:8d:4f:74:ac:76:01:94:
27:cc:71:d2:53:f6:20:1a:45:52:36:f7:be:e0:dd:74:c3:43:
07:42:f8:5a:dd:fe:f8:62:6e:4c:84:ba:0a:b7:02:3b:f8:46:
b3:97:a3:b6:6b:4b:ee:54:96:fb:cd:a4:1b:1a:71:54:13:cd:
10:87:52:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:20 2025 by rpki-client